PT-2024-29096 · Unknown · Anything-Llm

Published 2024-06-05 · Updated 2024-06-11 · CVE-2024-4084

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions mintplex-labs/anything-llm (affected versions not specified)

Description A Server-Side Request Forgery (SSRF) vulnerability exists, allowing attackers to bypass restrictions intended to limit access to intranet IP addresses and protocols. Despite filtering out intranet IP addresses starting with 192, 172, 10, and 127, and limiting access protocols to HTTP and HTTPS, attackers can bypass these restrictions using alternative IP address representations and accessing other ports on localhost. This enables attackers to access internal network assets, attack internal web services, scan internal hosts, and potentially access AWS metadata endpoints. The issue is due to insufficient validation of user-supplied URLs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-4084

Affected Products

Anything-Llm

References · 5

• 🔥 https://huntr.com/bounties/bf44517e-a07d-4f54-89b4-3b05fca2a008 · Exploit
• https://osv.dev/vulnerability/CVE-2024-4084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4084 · Security Note
• https://twitter.com/wh0amitz/status/1798444462974324993 · Twitter Post
• https://t.me/cvenotify/82846 · Telegram Post